$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: CXgK//oe9kRSvGQjFczhuVQNopGhngLMEoZcZ1o1too= Subject key identifier: 91:AF:32:69:81:B8:47:70:BC:4D:A5:5B:BF:42:34:6F:2B:4A:88:A9 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: D9 Signing time: Fri 09 May 2025 04:34:44 +0000 Manifest this update: Fri 09 May 2025 04:34:43 +0000 Manifest next update: Fri 16 May 2025 04:34:43 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: DrJ6cZjB7wUDdINi9BwXqNlNT2f0dhuanRqvvtGPj+I=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: EfnXa4JTXRSQtpkoLm2l4ZqnMhuE0NVKwTVdEbOaaqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 04:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: May 9 04:34:43 2025 GMT Not After : May 16 04:34:43 2025 GMT Subject: CN=681d85e3-02c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:f9:d0:d5:5d:2f:4b:df:b2:9f:f8:fb:07: 28:27:03:0e:f9:4f:fe:02:e4:a0:33:7a:27:98:34: c4:cb:4f:0f:4f:78:95:9a:78:b0:df:92:3d:16:61: b5:10:18:ab:db:ab:86:c1:a8:18:27:6b:17:0d:cb: 0a:3d:9c:df:41:b4:23:b0:5e:14:9b:3c:45:51:56: 4b:12:5b:6e:15:e5:27:ad:a6:00:15:eb:4a:c8:4e: 98:69:5e:05:c3:f9:bd:aa:98:4f:b5:7e:eb:00:2b: 36:12:63:af:f7:08:42:15:56:c2:79:e0:db:14:50: 98:aa:72:80:a2:c2:3f:74:4a:c6:a7:94:2e:16:91: 5a:51:2d:b8:62:90:81:94:6d:13:3f:d0:52:73:94: 96:fc:df:00:57:3b:48:39:b6:e0:34:3c:50:0c:42: e4:db:86:3f:31:a6:3e:d7:0a:0d:9f:74:93:ed:18: b6:91:1e:46:98:8c:b0:99:c6:8f:b2:48:f9:03:19: f9:9a:ef:91:9d:5a:3f:a8:8c:14:77:c9:a5:76:b7: 33:fb:0a:4c:42:fd:1f:d8:08:cf:09:e3:83:65:eb: a1:30:74:67:d5:c0:4f:35:74:79:17:13:3f:3b:7c: 64:54:1d:da:dd:09:08:43:67:a1:fe:1d:df:a6:4d: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AF:32:69:81:B8:47:70:BC:4D:A5:5B:BF:42:34:6F:2B:4A:88:A9 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:35:d8:3b:69:d5:de:60:58:99:e5:ee:44:99:6d:12:c7:73: d7:20:a3:52:d2:7b:c4:fe:07:ae:8b:75:f5:8b:e0:88:79:43: 1e:d6:57:27:9c:d8:72:f5:c4:4a:fc:bd:d2:ec:0c:f0:2d:26: bb:89:cb:00:16:b6:9b:a1:b2:e0:e4:3d:43:36:c1:bc:bd:f9: db:d8:26:5a:97:d6:e6:ad:a4:71:ba:34:45:36:10:8c:2c:32: 2a:a2:9e:f5:e8:67:4b:45:13:3e:dd:90:c9:17:bc:b2:67:c8: 3f:a0:ef:d3:dd:20:bd:ab:51:d8:02:e2:24:71:36:f8:58:df: d6:a3:8f:ad:8f:38:ab:06:60:5e:9d:7d:1e:97:9b:24:a2:3e: 5f:1c:8a:4d:5e:55:44:cd:18:80:3e:f4:22:3d:37:3e:9c:f5: aa:93:e2:e5:17:7e:8a:e1:31:5d:6d:c4:cf:53:c1:c9:62:a2: 89:28:1e:b5:89:70:8c:3e:5f:c6:2b:f7:87:5d:fc:7a:46:39: 12:70:1f:81:81:01:d3:76:de:25:f7:e1:00:aa:b6:47:15:61: ed:cf:90:e8:84:b4:19:a0:44:94:1a:55:fe:e7:e8:d7:0c:8a: 0f:27:50:19:be:87:81:ac:0f:ee:c2:eb:1e:05:a0:7c:4f:62: 15:9a:b6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUwNTA5MDQzNDQzWhcNMjUwNTE2MDQzNDQzWjAYMRYwFAYD VQQDEw02ODFkODVlMy0wMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSj50NVdL0vfsp/4+wcoJwMO+U/+AuSgM3onmDTEy08PT3iVmniw35I9FmG1 EBir26uGwagYJ2sXDcsKPZzfQbQjsF4UmzxFUVZLEltuFeUnraYAFetKyE6YaV4F w/m9qphPtX7rACs2EmOv9whCFVbCeeDbFFCYqnKAosI/dErGp5QuFpFaUS24YpCB lG0TP9BSc5SW/N8AVztIObbgNDxQDELk24Y/MaY+1woNn3ST7Ri2kR5GmIywmcaP skj5Axn5mu+RnVo/qIwUd8mldrcz+wpMQv0f2AjPCeODZeuhMHRn1cBPNXR5FxM/ O3xkVB3a3QkIQ2eh/h3fpk0N5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGvMmmB uEdwvE2lW79CNG8rSoipMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDRC9COTdCNzYzOEUwMkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJj Skx1ZkpBOWM1VmJ0Z24taXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDNdg7adXeYFiZ5e5EmW0Sx3PXIKNS0nvE/geui3X1i+CIeUMe1lcn nNhy9cRK/L3S7AzwLSa7icsAFrabobLg5D1DNsG8vfnb2CZal9bmraRxujRFNhCM LDIqop716GdLRRM+3ZDJF7yyZ8g/oO/T3SC9q1HYAuIkcTb4WN/Wo4+tjzirBmBe nX0el5skoj5fHIpNXlVEzRiAPvQiPTc+nPWqk+LlF36K4TFdbcTPU8HJYqKJKB61 iXCMPl/GK/eHXfx6RjkScB+BgQHTdt4l9+EAqrZHFWHtz5DohLQZoESUGlX+5+jX DIoPJ1AZvoeBrA/uwuseBaB8T2IVmrba -----END CERTIFICATE-----Generated at Sun May 11 03:10:16 2025 by rpki-client